Zero-downtime Linux kernel zero-day mitigation via eBPF and SECCOMP (github.com)

<a href="https://news.ycombinator.com/item?id=49806050">Comments</a>